Cisco has a Hacking Cert?!?

Cisco’s new “verified offensive security” ethical hacking certification is built around quarterly, themed Capture the Flag (CTF) challenges and a continuous-learning model—an attempt to bring Cisco’s security brand into the hands-on, lab-driven world long dominated by competitors like Hack The Box and TryHackMe. The pitch centers on real-world offensive security practice, domain-specific digital badges, and keeping skills current as threats and tooling evolve.

Cisco’s approach starts with required training through Cisco Networking Academy (Cisco U). The course itself is positioned as free, with an instructor-led option available for purchase and a self-paced path that includes hands-on labs and a gamified, narrative-style learning flow. Completion of the training is treated as a prerequisite to unlock the CTF portion. The CTFs are described as fresh every quarter, with “themed” challenges meant to mirror the changing threat landscape. Earning badges is also framed as a way to signal progression—moving learners toward a “versatile and dynamic security professional” profile.

The certification’s content breadth is laid out at a fundamentals level: information gathering (including DNS analysis and network scanning), vulnerability scanning and analysis, and common exploitation-adjacent tooling such as netcat, PowerShell (with references to Metasploit-like workflows), and scripting/code analysis. Example challenge topics mentioned include investigating events to determine whether suspicious activity is real or a false positive, and DNS-related scenarios. A capstone activity is also described as using SQL injection to find a flag, reinforcing the emphasis on practical exploitation concepts rather than purely theoretical knowledge.

Pricing and validation details stand out as the biggest open questions. While the training is described as free, the CTF challenges that complete the pathway are said to cost $100, and the transcript repeatedly flags uncertainty about how each CTF maps to “ethical hacker” validation—whether different challenges correspond to different domains or skill claims. That matters because the certification’s long-term value depends less on the curriculum and more on whether employers recognize and search for it on resumes.

The discussion also places Cisco’s move in context: ethical hacking certifications have become a crowded market, and Cisco is entering late compared with vendors that have built entire ecosystems around CTFs, labs, and frequent updates. The comparison is blunt—Cisco’s offering is seen as borrowing the same arena (hands-on hacking practice) rather than introducing a clearly new learning model. Still, the Cisco brand and its history in networking certifications (especially CCNA) give it a potential advantage in credibility and market awareness.

By the end, the takeaway is pragmatic: the certification could be worth trying for learners who want structured, lab-based offensive security practice with a recognizable Cisco badge, but its career payoff will hinge on marketability—whether hiring managers and HR teams treat it as a meaningful signal. The transcript also briefly pivots to unrelated projects and sponsor content, but the core focus remains Cisco’s attempt to turn ethical hacking into a Cisco-branded, continuously updated pathway.